[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [update] security/undated/1ldso.wml (1.6 -> 1.7)

From: GOTO Masanori <gotom@debian.or.jp>
Subject: Re: [update] security/undated/1ldso.wml (1.6 -> 1.7)
Date: Thu, 5 Feb 2004 09:42:13 +0900
List-help: <mailto:debian-www-ctl@debian.or.jp?body=help>
List-id: debian-www.debian.or.jp
List-owner: <mailto:debian-www-admin@debian.or.jp>
List-post: <mailto:debian-www@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-www-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-www-ctl@debian.or.jp; help=<mailto:debian-www-ctl@debian.or.jp?body=help>
X-ml-name: debian-www
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-spam-level:
X-spam-status: No, hits=-1.6 required=10.0 tests=ISO2022JP_BODY,SPAM_PHRASE_00_01 version=2.44
References: <87hdy978hj.wl%tomos@xxxxxxxxxxxxxxxx> <20040204.143841.01375525.debian@xxxxxxxxxxxxxxxxx>
Message-id: <81n07y8ihu.wl@xxxxxxxxxxxxxxxxxxxxxx>
X-mail-count: 05556
User-agent: Wanderlust/2.9.9 (Unchained Melody) SEMI/1.14.3 (Ushinoya) FLIM/1.14.3 (Unebigory�mae) APEL/10.3 Emacs/21.2 (i386-debian-linux-gnu) MULE/5.0 (SAKAKI)

At Wed, 4 Feb 2004 14:39:08 +0900,
Tomohiro KUBOTA wrote:
> replacement が意味するところは、通常の printf() 関数はそれそのものが
> 共有ライブラリ (libc) 中の関数なので、共有ライブラリ呼び出し過程で
> エラーが生じた場合は通常の printf() が使えないので代用品を用意して
> ある、ということだと思います。その代用 printf() に脆弱性があった
> ということでしょう。

そうだと思います。

今の glibc でいう _dl_printf などのことでしょう。
Ex) glibc-2.3.2/elf/dl-misc.c:_dl_debug_vdprintf

例えば

	env LD_DEBUG=versions ls

の表示など。

-- gotom

References:
- [update] security/undated/1ldso.wml (1.6 -> 1.7)
  - From: SUGIYAMA Tomoaki
- Re: [update] security/undated/1ldso.wml (1.6 -> 1.7)
  - From: Tomohiro KUBOTA

Prev by Date: Debian Web site Translation Update
Next by Date: Debian Web site Translation Update
Previous by thread: Re: [update] security/undated/1ldso.wml (1.6 -> 1.7)
Next by thread: Re: [update] security/undated/1ldso.wml (1.6 -> 1.7)
Index(es):
- Date
- Thread